fa8c47410e51113b44fb2e94ead83400d78a82ab98d9a494ccc9be391784cd26

Sharing

Copy URL Twitter E-mail

General

Target

fa8c47410e51113b44fb2e94ead83400d78a82ab98d9a494ccc9be391784cd26
Size

327KB
MD5

a9a6d929af9f99342b76217732261570
SHA1

c1ee954936d468d184203266b23047e36ee47e92
SHA256

fa8c47410e51113b44fb2e94ead83400d78a82ab98d9a494ccc9be391784cd26
SHA512

7a45f5b7dc363f4b4cfaaafdf1deae676e791df6695c0743f17db0ab40183f06be03b791656d1c791f74c0ab23d9320656c9f87ff2f573fc7c3e83f0e2743719
SSDEEP

6144:tTQ4gz/LWzS6lbNe1HAllcUFojJu7w6g1R3hU7dOSHO2qTtXEa2KNo0xajT2S+:tTQ4gb2bQ1HUCB3Cp8Ua2KMI

Score

N/A

Malware Config

Signatures

Files

fa8c47410e51113b44fb2e94ead83400d78a82ab98d9a494ccc9be391784cd26
.exe windows x86

c81119237bfb7d909533e09d7baed838

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxExA
GetLastActivePopup
EnumThreadWindows
EndDialog
MoveWindow
CreateWindowExA
FindWindowA
AdjustWindowRectEx
SetForegroundWindow
LoadCursorA
TranslateMessage
GetClipboardData
ShowWindow

gdi32

CloseEnhMetaFile
ExtCreateRegion
GdiSetBatchLimit
AngleArc
CancelDC
DeleteObject
GetStockObject
CombineTransform
Escape
ExcludeClipRect
CreateSolidBrush
EqualRgn
GdiFlush

comctl32

ord6
ord8
PropertySheetA
UninitializeFlatSB
ord15
CreateStatusWindowW
CreatePropertySheetPageA
ord14
InitCommonControlsEx
InitializeFlatSB

advapi32

BackupEventLogW
OpenBackupEventLogA
RegFlushKey
OpenBackupEventLogW
RegNotifyChangeKeyValue
RegOpenKeyA
DeregisterEventSource
RegEnumValueA

shlwapi

StrChrW
StrCmpNA
StrChrIW
StrRChrIW

kernel32

IsBadStringPtrA
LocalAlloc
LocalUnlock
ReleaseSemaphore
GetUserDefaultLCID
LocalHandle
CreateEventA
OpenSemaphoreA
WriteProfileSectionA
GetModuleHandleA
GetProcAddress
VirtualAllocEx
IsBadReadPtr
GetTimeFormatA
SetLocaleInfoA
LocalFlags
VirtualFree
GetStartupInfoA
GetNumberFormatA
GlobalMemoryStatus

netapi32

NetConfigGet
NetFileGetInfo
NetConnectionEnum
NetErrorLogWrite
NetGroupAdd
NetGetJoinableOUs
NetErrorLogRead
NetGroupAddUser
NetConfigGetAll
NetGetJoinInformation
NetErrorLogClear
NetAlertRaiseEx
NetGetAnyDCName
NetAuditWrite
Netbios

msvcrt

exit
_XcptFilter
_exit
__mb_cur_max
_isctype
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_pctype
perror

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 313KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c81119237bfb7d909533e09d7baed838

Headers

File Characteristics

Imports

user32

gdi32

comctl32

advapi32

shlwapi

kernel32

netapi32

msvcrt

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 313KB - Virtual size: 312KB

.data Size: 512B - Virtual size: 103KB

.tls Size: 512B - Virtual size: 4B

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 313KB - Virtual size: 312KB

.data
Size: 512B - Virtual size: 103KB

.tls
Size: 512B - Virtual size: 4B

.rsrc
Size: 4KB - Virtual size: 4KB